Image Classification on Aircraft (Acc, Rob)
32.7Top-1 Clean AccuracyMTA
Evaluation Results
| Method | Links | ||||
|---|---|---|---|---|---|
| MTABackbone=ViT-L/14, Perturbation budget (epsilon)=4/2552026.06 | 32.7 | — | — | 8 | |
| T-VSSBackbone=ViT-L/14, Perturbation budget (epsilon)=4/2552026.06 | 32.7 | — | — | 26.9 | |
| TTCBackbone=ViT-L/14, Perturbation budget (epsilon)=4/2552026.06 | 31.7 | — | — | 0.5 | |
| EnsembleBackbone=ViT-L/14, Perturbation budget (epsilon)=4/2552026.06 | 31.7 | — | — | 12.7 | |
| R-TPTBackbone=ViT-L/14, Perturbation budget (epsilon)=4/2552026.06 | 31.7 | — | — | 17.2 | |
| CLIPBackbone=ViT-L/14, Perturbation budget (epsilon)=4/2552026.06 | 30 | — | — | 0 | |
| TTPBackbone=ViT-L/14, Perturbation budget (epsilon)=4/2552026.06 | 29.2 | — | — | 17.7 | |
| MTABackbone=ViT-B/16, Perturbation budget (epsilon)=4/2552026.06 | 25 | — | — | 4.3 | |
| T-VSSBackbone=ViT-B/16, Perturbation budget (epsilon)=4/2552026.06 | 24.3 | — | — | 24.4 | |
| CLIPBackbone=ViT-B/16, Perturbation budget (epsilon)=4/2552026.06 | 23.9 | — | — | 0 | |
| R-TPTBackbone=ViT-B/16, Perturbation budget (epsilon)=4/2552026.06 | 23.9 | — | — | 13.2 | |
| TTPBackbone=ViT-B/16, Perturbation budget (epsilon)=4/2552026.06 | 23.9 | — | — | 14.8 | |
| AdvMaPLeShots=16, Training Epochs=10, Training Attack (PGD)=2-step (1/255), Evaluation Attack (PGD-100)=100-step (1/255)2026.05 | 23.63 | — | — | 7.33 | |
| FAPShots=16, Training Epochs=10, Training Attack (PGD)=2-step (1/255), Evaluation Attack (PGD-100)=100-step (1/255)2026.05 | 23.5 | — | — | 7.97 | |
| EnsembleBackbone=ViT-B/16, Perturbation budget (epsilon)=4/2552026.06 | 23.4 | — | — | 8.7 | |
| TTCBackbone=ViT-B/16, Perturbation budget (epsilon)=4/2552026.06 | 23.3 | — | — | 0.5 | |
| AdvVLPShots=16, Training Epochs=10, Training Attack (PGD)=2-step (1/255), Evaluation Attack (PGD-100)=100-step (1/255)2026.05 | 23.27 | — | — | 8.4 | |
| MTABackbone=ResNet-50, Perturbation budget (epsilon)=1/2552026.06 | 18.1 | — | — | 3.7 | |
| T-VSSBackbone=ResNet-50, Perturbation budget (epsilon)=1/2552026.06 | 18 | — | — | 20.3 | |
| R-TPTBackbone=ResNet-50, Perturbation budget (epsilon)=1/2552026.06 | 17.5 | — | — | 12.6 | |
| CLBPShots=16, Training Epochs=10, Training Attack (PGD)=2-step (1/255), Evaluation Attack (PGD-100)=100-step (1/255)2026.05 | 17.46 | — | — | 15.42 | |
| TPTBackbone=ResNet-50, Perturbation budget (epsilon)=1/2552026.06 | 17.3 | — | — | 0 | |
| C-TPTBackbone=ResNet-50, Perturbation budget (epsilon)=1/2552026.06 | 16.7 | — | — | 0 | |
| EnsembleBackbone=ResNet-50, Perturbation budget (epsilon)=1/2552026.06 | 16.4 | — | — | 9.8 | |
| CLIPBackbone=ResNet-50, Perturbation budget (epsilon)=1/2552026.06 | 15.7 | — | — | 0 | |
| TTPBackbone=ResNet-50, Perturbation budget (epsilon)=1/2552026.06 | 15.6 | — | — | 11.6 | |
| AdvVPShots=16, Training Epochs=10, Training Attack (PGD)=2-step (1/255), Evaluation Attack (PGD-100)=100-step (1/255)2026.05 | 1.33 | — | — | 0.63 | |
| APTBackbone=CLIP-ResNet50, Augmented Views=63, Adversarial perturbation budget (epsilon)=1.02026.06 | — | 0.9 | 0.9 | — | |
| APT+TeCoABackbone=CLIP-ResNet50, Augmented Views=63, Adversarial perturbation budget (epsilon)=1.02026.06 | — | 9.9 | 9.7 | — | |
| C-TPTSetting=Zero-shot, Backbone=ViT-B/16, Attack=PGD-100, Perturbation Budget (epsilon_a)=4/255, Patch Granularity=16x162026.05 | — | 23.9 | 0 | — | |
| CLBPSetting=Zero-shot, Backbone=ViT-B/16, Attack=PGD-100, Perturbation Budget (epsilon_a)=4/255, Patch Granularity=16x162026.05 | — | 21.8 | 14.6 | — | |
| CLIPSetting=Zero-shot, Backbone=ViT-B/16, Attack=PGD-100, Perturbation Budget (epsilon_a)=4/255, Patch Granularity=16x162026.05 | — | 23.9 | 0 | — | |
| CLIPBackbone=CLIP-ResNet50, Augmented Views=63, Adversarial perturbation budget (epsilon)=1.02026.06 | — | 15.7 | 0 | — | |
| MTASetting=Zero-shot, Backbone=ViT-B/16, Attack=PGD-100, Perturbation Budget (epsilon_a)=4/255, Patch Granularity=16x162026.05 | — | 25 | 4.3 | — | |
| R-TPTSetting=Zero-shot, Backbone=ViT-B/16, Attack=PGD-100, Perturbation Budget (epsilon_a)=4/255, Patch Granularity=16x162026.05 | — | 23.9 | 13.2 | — | |
| SS-TPTBackbone=CLIP-ResNet50, Augmented Views=63, Adversarial perturbation budget (epsilon)=1.0, mode=test-time2026.06 | — | 18.2 | 13.6 | — | |
| TeCoABackbone=CLIP-ResNet50, Augmented Views=63, Adversarial perturbation budget (epsilon)=1.02026.06 | — | 5.8 | 5.8 | — | |
| TPTSetting=Zero-shot, Backbone=ViT-B/16, Attack=PGD-100, Perturbation Budget (epsilon_a)=4/255, Patch Granularity=16x162026.05 | — | 23.4 | 0 | — |